Sequence Hash: multihashing for the rest of us
Summary: Trail of Bits introduced SequenceHash and SequenceMAC, hash-agnostic multihashing constructions that work with SHA256/384/512, BLAKE, and RIPEMD rather than being tied to Keccak like NIST's TupleHash. The specification is open source and now part of the Community Cryptography Specification Project (C2SP), with initial Rust, Go, and Python implementations and test vectors released.
Why it matters: Multihashing errors feed directly into the Fiat-Shamir transform used in zero-knowledge proofs, where the source says mistakes are sometimes measured in millions of dollars, and CNSA 2.0's mandate of SHA384 and SHA512 for government contracting leaves Keccak-only TupleHash out in the cold.
Read the original at Trail of Bits Blog ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026